Conversation

Now that RFC 9905 has been published it's time to check if there are still domains using the deprecated algorithm 5 and 7.

$ dig +tcp @\c.root-servers.net axfr . > root.zone
$ grep -P 'IN\tDS' root.zone | grep ' 5 ' | wc -l
0
$ grep -P 'IN\tDS' root.zone | grep ' 7 ' | awk '{ print $1}' | sort -u | idn2 -d
gd.
kpn.
la.
samsung.
삼성.
پاکستان.
ລາວ.

Aaaaand... Still seven domains using RSASHA1-NSEC3-SHA1

#DNS #DNSSEC